Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa
File: u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa (raw, json)
Hash identifier: 7O01VUQlx2/5mCx+t4SgO9Lggi1VIhx12oZO6kEvwsM=
Subject key identifier: BB:58:DD:01:0D:9E:B2:10:EA:1D:7A:B8:50:58:C4:8D:CB:97:9A:C2
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0194258F613E6BDD4F8B0A4A27CBE0978DE7
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136744
IP address blocks: 212.30.38.0/24 maxlen: 24
212.30.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:61:3e:6b:dd:4f:8b:0a:4a:27:cb:e0:97:8d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb58dd010d9eb210ea1d7ab85058c48dcb979ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:59:91:00:a7:73:c8:4f:14:40:3e:fc:bb:
59:1a:80:b5:fc:00:3e:44:df:0e:9f:22:e8:97:b6:
ee:21:fb:3e:7b:15:89:89:58:63:c1:ce:a2:4f:fb:
2f:47:47:b3:87:c2:1e:74:a5:94:42:88:37:4f:22:
9c:8a:cf:b1:41:0c:0e:23:43:82:a3:92:7e:df:c6:
73:d5:1c:29:ba:10:78:b8:51:98:ff:6b:56:8a:06:
b0:71:99:bb:d2:1f:2e:76:fd:55:92:b7:6f:6c:24:
ce:8a:b4:a3:a0:c3:7a:22:af:e9:10:74:c5:af:8f:
fd:bd:ee:63:77:a4:96:61:d1:d1:21:43:a5:cb:85:
c0:87:4a:00:8e:89:e5:4b:16:eb:8e:4b:cc:ef:4c:
82:4c:56:cd:00:83:9e:6a:3b:21:05:e5:60:95:ae:
cb:c0:ed:3d:c8:6f:9f:b5:3f:ce:29:84:5d:d6:14:
5f:21:b7:64:c3:e4:95:40:a7:95:6f:f9:c8:8e:c4:
79:8b:16:0a:6e:28:2d:f9:1c:2b:f3:a5:bb:a6:37:
e7:33:b0:4a:6b:27:9a:7b:78:9d:2a:73:4d:03:dc:
19:0e:73:63:90:68:fc:da:1f:cf:33:67:7a:8b:91:
8b:1c:6c:2f:bc:39:0a:1c:39:91:c9:96:66:36:d5:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:58:DD:01:0D:9E:B2:10:EA:1D:7A:B8:50:58:C4:8D:CB:97:9A:C2
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.38.0/24
212.30.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e2:82:d5:16:a4:77:a0:46:e9:11:df:6b:52:c6:72:0f:11:
0c:75:09:56:bc:63:66:61:0a:09:3f:6f:88:15:32:d0:c5:6d:
09:4d:c9:b0:cf:6b:3e:52:dc:17:39:82:40:76:4d:fe:09:5a:
16:79:c1:8a:69:31:94:b2:e1:ed:d2:ed:5b:ad:7f:71:0d:70:
57:2c:32:a2:b6:80:cc:f6:a6:c2:fc:bd:68:c5:3b:a2:15:5e:
11:06:d4:b1:74:f4:68:9a:32:7d:86:70:b1:81:b4:94:8c:24:
e3:2e:a4:26:f5:32:ea:da:de:09:30:82:4e:a6:fb:a1:d4:e6:
ad:26:bb:0d:73:03:21:bc:b7:9f:01:b8:2b:29:a0:53:3c:ec:
d3:96:f6:00:34:8e:a3:1a:8d:90:6f:9b:6b:2d:89:a0:ad:ac:
f0:e8:20:86:cd:c3:20:64:b0:a3:c2:94:3a:4c:c4:d4:92:25:
e3:67:a4:68:a4:44:73:47:6d:bd:df:22:0b:54:e5:69:47:ab:
e2:36:8f:d2:2f:6c:23:76:89:28:d1:9c:8f:2d:74:64:b7:8c:
de:a8:70:39:f6:24:30:57:15:6f:1c:7d:29:ae:25:f8:69:4b:
8d:92:02:26:ef:a0:24:e1:16:f1:cc:fa:a1:13:0d:6b:dc:fc:
95:be:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:35:35 2025 by rpki-client